debit encryption rules